Privacy Policy

Our privacy policy and commitment to protecting your privacy

Last updated: November 2, 2026

GroupBenefits.ca is the group benefits and retirement division of Park & Associates Insurance Agency Inc. This policy explains how we collect, use, disclose and protect personal information when you visit our website, contact us or use our services.

Your rights and choices

You have the right to understand why we collect personal information, how we use it and the circumstances in which we share it.

Subject to applicable legal requirements and exceptions, you may:

  • request access to personal information we hold about you;
  • ask us to correct inaccurate or incomplete information;
  • withdraw your consent to certain uses or disclosures of your information; and
  • raise a question or complaint about our privacy practices.

We may need to verify your identity before responding to a request. If we cannot fulfill a request, we will explain why, where permitted or required by law.

Withdrawing consent does not affect processing already carried out lawfully. It may also limit our ability to provide a service that depends on the information concerned. We will explain any relevant consequences.

How we collect and use your information

We collect information you provide when you contact us, submit an inquiry, request quotes or work with us. Depending on the service, this may include your name, business contact details, information about your organization and its benefits or retirement programs, and other information needed to respond to your request.

We use this information to:

  • respond to inquiries and communicate with you;
  • understand your organization’s needs;
  • prepare and compare benefits, insurance and retirement options;
  • obtain quotes and assist with applications;
  • support existing plans and respond to service questions;
  • fulfill contractual, legal and regulatory responsibilities;
  • protect our services and help prevent fraud; and
  • manage our business and improve our services.

Where a service requires employee, claims, financial or medical information, we identify the purpose and arrange an appropriate way to collect it. We obtain consent where required.

Website inquiries

Our inquiry and quote-request forms collect the information shown on the form. We use it to respond, discuss your organization’s needs and provide the services you request.

Providing a phone number on our quote-request form is optional.

Please do not include employee medical information, individual claims details, government identification numbers or other sensitive personal information in a general website inquiry. If we need sensitive information, we will explain why and arrange an appropriate process.

Submitting a form does not automatically subscribe you to a marketing mailing list.

Website technology, cookies and advertising measurement

When you visit our website, our hosting and technology providers may collect technical information, such as your IP address, browser and device information, pages visited, the time of your visit and how you arrived at the website.

Cookies and similar technologies may store information on your device or help recognize your browser during or between visits.

We use Google Tag Manager to manage website tags. The information collected depends on the tags and features enabled through it.

  • Google Analytics: We use Google Analytics to understand how visitors use our website and identify ways to improve it. It may collect information about visits, page views and interactions, browser or device identifiers, and your approximate location (such as city or region) derived from your IP address.
  • Google Ads measurement: We use Google Ads conversion measurement to understand whether interactions with our advertisements result in inquiries or other actions we have configured for measurement.
  • Google Ads enhanced conversions: Where enabled, Google Ads enhanced conversions may send Google a hashed (coded) version of the email address or phone number you enter in our quote-request form. This helps match inquiries to advertisement interactions for conversion measurement. Hashing converts the information into a code before it is sent.
  • Essential website functions: Where used, essential cookies or similar technologies support website operation, security or the storage of privacy preferences.

We use these tools to measure website use and advertising results, not to create remarketing audiences or personalize advertisements based on your visits to our website.

We may review this information in aggregate reports. However, the underlying information can include identifiers and information about individual browser or device activity; it should not be understood as entirely anonymous.

We do not use website analytics or advertising measurement to determine insurance eligibility, coverage or claims decisions.

Google processes information under the terms and policies applicable to the services we use. For more information, see How Google uses information from sites or apps that use its services and Google’s Privacy Policy.

Telephone inquiries

When you call us, we may record information you provide in our business records so we can respond and provide requested services.

We use call-tracking services to help understand which advertisements or website visits lead to telephone inquiries. These services may use forwarding numbers and collect information such as the caller’s telephone number, the time and duration of the call, and the advertising source.

Who receives information

Where needed to provide requested services, we may share relevant information with insurers, retirement-plan providers, administrators and other organizations involved in your request or plan.

We also use service providers that support website hosting, inquiry processing, communications, security and business administration. Where enabled, these include analytics and advertising-measurement providers such as Google.

For providers processing personal information on our behalf, we use contractual or other appropriate safeguards. The terms and privacy practices applicable to Google and other services may differ according to the service and feature used.

We may also disclose information where required or permitted by law.

Processing outside Canada

Some providers may store, access or process information outside Canada, including in the United States. Information processed in another country may be subject to that country’s laws and lawful access by its courts, law-enforcement agencies or other authorities.

We remain responsible for personal information under our control when it is processed on our behalf, and take reasonable steps to protect it through appropriate arrangements with service providers.

You may contact us for information about our use of service providers outside Canada.

What we will not do with your information

We do not sell client information.

We do not provide client information to unrelated organizations so they can independently market their own products or services to you.

Any sharing for advertising measurement is described in this policy and is subject to the applicable consent requirements and service terms.

How we protect your information

We use administrative, technical and physical safeguards appropriate to the sensitivity of the information.

Access is limited to employees, advisors and service providers who need the information for an authorized purpose. We communicate confidentiality and security expectations to those with access.

Where necessary under an existing contractual relationship, insurers or other providers may inspect relevant client records for audit or compliance purposes, subject to applicable confidentiality requirements.

No method of internet transmission or electronic storage can be guaranteed completely secure. Please use the appropriate process we provide when sharing sensitive information.

How long we retain information

We retain personal information for as long as reasonably necessary for the purposes for which it was collected, including responding to inquiries, providing services, maintaining appropriate business records and meeting legal or regulatory obligations.

Retention depends on the type of information, whether an inquiry becomes a client relationship and applicable recordkeeping requirements.

We delete, securely dispose of or de-identify information when it is no longer required, subject to any obligations to retain it.

For data covered by Google Analytics’ retention controls, we have configured a 14-month retention period for user-level and key-event data, and a 2-month retention period for other event-level data. Google deletes data that reaches the applicable retention limit through its scheduled monthly deletion process. Standard aggregate reports are not subject to these retention settings and may remain available longer. These settings do not determine how long we retain inquiry or client records, or how long information is retained in Google Ads.

New activity restarts the retention period for a visitor’s user identifier, so that identifier may be retained longer while the visitor remains active.

Privacy questions, requests and complaints

The person responsible for privacy at Park & Associates Insurance Agency Inc. can be contacted through:

Email: [email protected]

Please use the subject line “Privacy inquiry.”

Mail:
Privacy Officer
Park & Associates Insurance Agency Inc.
312 Dolomite Drive, Suite 214
Toronto, ON M3J 2N2

Contact us to request access or correction, ask about withdrawing consent, or raise a concern about how your information has been handled.

You may also contact the Office of the Privacy Commissioner of Canada regarding a privacy concern.

Updates to this policy

We may update this policy when our services, technology or privacy practices change. The date below identifies the latest revision.

Last updated: November 2, 2026